Sap S4core — known CVE vulnerabilities

Every CVE whose affected-product data names Sap S4core, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2021-33701 — CVSS 9.1 (critical): DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710…
• CVE-2018-2484 — CVSS 8.8 (high): SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04…
• CVE-2024-39592 — CVSS 7.7 (high): Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This…
• CVE-2023-35870 — CVSS 6.3 (medium): When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker…
• CVE-2026-24323 — CVSS 6.1 (medium): The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not…
• CVE-2026-0505 — CVSS 6.1 (medium): The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This…
• CVE-2024-37172 — CVSS 5.4 (medium): SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in…
• CVE-2023-40625 — CVSS 5.4 (medium): S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an…
• CVE-2023-29109 — CVSS 4.4 (medium): The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D…
• CVE-2026-23688 — CVSS 4.3 (medium): SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in…
• CVE-2023-29110 — CVSS 3.7 (low): The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E…
• CVE-2018-2419 — CVSS 3.7 (low): SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not…
• CVE-2023-32112 — CVSS 2.8 (low): Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606…